Question No: 216 – (Topic 2)

Which VPN technology is based on GDOI (RFC 3547)?

MPLS Layer 3 VPN

MPLS Layer 2 VPN

GET VPN

IPsec VPN

Answer: C

Question No: 217 – (Topic 2)

Refer to the exhibit you have configured two route-map instances on R1 which passes traffic from switch 1 on both VLAN 1 and VLAN 2.You wish to ensure that*the first route- map instance matches packets from VLAN 1 and sets next hop to 3232::2/128.* the second route-map instance matches packets from VLAN 2 and sets the next hop to

3232::3/128 What feature can you implement on R1 to make this configuration possible?

PBR

BGP local-preference

BGP next-hop

VSSP

GLBP

Answer: C

Question No: 218 DRAG DROP – (Topic 2)

Drag each step in the SCEP workflow on the left into the correct order of operations on the right?

Answer:

Explanation:

Step 1: Obtain and validate CA cert.

Step 2: Generate a certificate signing request for the CA.

Step 3: Sent a request to SCEP server to confirm that the cert was signed. Step 4: Re- enroll the client and replace the existing certificate.

Step 5: Check Certificate revocation list.

Question No: 219 DRAG DROP – (Topic 2)

Drag and drop each step in the SCEP process on the left into the correct order of operations on the right.

Answer:

Explanation:

A:5,B:4,C:2,D:3,E:1,F:6.

Question No: 220 – (Topic 2)

Which of these is a core function of the risk assessment process? (Choose one.)